Dozens of states accuse the company of violating the Children's Online Privacy Protection Act.